Announcement: OpenSSL version 1.0.1c

The OpenSSL project team is pleased to announce the release of version 1.0.1c of our open source toolkit for SSL/TLS. This new OpenSSL version is a new feature release. For a complete list of changes, please see http://cvs.openssl.org/getfile?f=openssl/CHANGES&v=OpenSSL_1_0_1c.

The most significant changes are:

• Fix TLS/DTLS record length checking bug CVE-2012-2333
• Don't attempt to use non-FIPS composite ciphers in FIPS mode.

We consider OpenSSL 1.0.1c to be the best version of OpenSSL available and we strongly recommend that users of older versions upgrade as soon as possible. OpenSSL 1.0.1c is available for download via HTTP and FTP from the following master locations (you can find the various FTP mirrors under http://www.openssl.org/source/mirror.html):

• http://www.openssl.org/source/
• ftp://ftp.openssl.org/source/

The distribution file name is:

• openssl-1.0.1c.tar.gz
  Size: 4457113
  MD5 checksum: ae412727c8c15b67880aef7bd2999b2e
  SHA1 checksum: 91b684de947cb021ac61b8c51027cc4b63d894ce
  

The checksums were calculated using the following commands:

    openssl md5 openssl-1.0.1c.tar.gz
    openssl sha1 openssl-1.0.1c.tar.gz

Yours,
The OpenSSL Project Team.